The certificates errors reported above are due to a faulty puppet configuration change which switched the integration labs instance to a new DNS resolver. That one introduces in the fully qualified hostname the project name (ie: host.integration.eqiad.wmflabs) which mess up with the certs.

I have switched the instances to the Zuul Debian package via cherry picked patch https://gerrit.wikimedia.org/r/#/c/202714/ . In short that removes the git::clone and python setup.py install in favor of installing the package.

The package hasn't been uploaded to apt.wikimedia.org . There is a Precise and a Trusty version of it in my homedir on integration.

I have switched the instances to the Zuul Debian package via cherry picked patch https://gerrit.wikimedia.org/r/#/c/202714/ . In short that removes the git::clone and python setup.py install in favor of installing the package.
The package hasn't been uploaded to apt.wikimedia.org . There is a Precise and a Trusty version of it in my homedir on integration.
Will refine tomorrow.

Thanks. The new trusty instances are now up and running. Precise next :)